CVE-2024-52282

Rancher Helm Applications may have sensitive values leaked

CVSS 6.2 MEDIUMEPSS 0.4%CWE-200

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.2EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 abr 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher allowing any users with GET access to the Rancher Manager Apps Catalog to read any sensitive information that are contained within the Apps’ values. Additionally, the same information leaks into auditing logs when the audit level is set to equal or above 2. This issue affects rancher: from 2.8.0 before 2.8.10, from 2.9.0 before 2.9.4.

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N

Produtos afetados

SUSE · rancher

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://bugzilla.suse.com/show_bug.cgi?id=CVE-2024-52282 https://github.com/rancher/rancher/security/advisories/GHSA-9c5p-35gj-jqp4